Platform Engineer – Monitoring, Observability & SIEM (MONSO)

Overview

In this role, you will help build a modern, self-service monitoring, observability and SIEM platform within SPEAR Technology. You will implement as-code platforms and automations to empower SOC/CyberSec and developers to onboard data and deploy use cases via CI/CD. You’ll work on Splunk-based tooling, Kubernetes-driven workloads, and expand into additional security analytics tools. This is a hands-on role at a forward-thinking bank that values automation, collaboration, and continuous learning. You will have a clear impact on how the bank detects and responds to threats while enabling cross-functional teams.

Pay / Benefits

• private pension plan – 10% of base salary
• generous 30 day holiday allowance
• private health insurance
• life insurance scheme
• flexible working hours
• enhanced parental leave policies

Responsibilities

• Build and maintain monitoring, observability, and SIEM tooling using Infrastructure/Configuration as Code
• Deploy, scale, and automate platform workloads on internal Kubernetes platform
• Develop self-service automations and CI/CD pipelines to onboard data and deploy detection use cases autonomously
• Ensure robust integration across hybrid infrastructure, log pipelines, and network telemetry

Key requirements

• Self-starter with DevOps mindset and automation-first approach
• Strong background in Splunk (SPL, dashboards, alerts, data ingestion, forwarders) and OpenTelemetry collectors
• Knowledge of Prometheus and Grafana or similar tooling
• Hands-on Kubernetes experience with deployment and operation of workloads, Helm charts, and manifests
• Good networking fundamentals (TCP/IP, DNS, TLS, load balancing, firewalls) and network telemetry (NetFlow/IPFIX, SNMP, syslog)
• Scripting proficiency in Python and Linux/Bash; enterprise Linux administration

• Proactive problem solver
• self-service enablement
• ability to work cross-functionally
• Splunk administration and Splunk on Kubernetes (Splunk Operator)
• Enterprise Security (ES) or ITSI (desirable)
• Cisco Secure Network Analytics / Stealthwatch / XDR / Rapid7 familiarity (desirable)

…